Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020896904DE311F19BFBC7FCCE1D38B0.roa
File: 020896904DE311F19BFBC7FCCE1D38B0.roa (raw, json)
Hash identifier: 8UNhkNBrKAIbeSsGu86eQLFhOEjlVtjShP4Q+LaMbi4=
Subject key identifier: BB:AE:79:8F:29:F9:AA:16:A9:30:93:24:AE:20:5A:41:C1:33:19:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020896904DE311F19BFBC7FCCE1D38B0.roa
Signing time: Tue 12 May 2026 09:14:42 +0000
ROA not before: Tue 12 May 2026 09:14:37 +0000
ROA not after: Tue 16 Jun 2026 09:14:37 +0000
asID: 22773
IP address blocks: 154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.13.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117561 (0x1cb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 09:14:37 2026 GMT
Not After : Jun 16 09:14:37 2026 GMT
Subject: CN=6a02ef81-18df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:c5:72:25:d8:10:fe:de:48:9c:17:12:99:
7f:14:c1:da:96:00:ab:81:69:a3:47:96:22:b6:68:
5f:30:4a:53:53:33:d4:50:48:46:86:61:3d:84:73:
83:ee:a0:ea:a1:30:5e:42:e2:6b:b9:f4:75:f3:b0:
03:f2:86:57:09:85:31:e6:ab:fc:85:71:5a:89:c8:
01:6b:4c:4d:7a:8e:cf:49:f8:04:7f:0b:6d:ff:e1:
17:75:af:a3:62:f8:3b:df:92:d5:cd:84:f1:de:a1:
c7:86:a2:f3:d7:f4:45:b4:9b:fc:5b:34:b5:49:7a:
2c:a3:72:11:8a:19:97:97:ed:25:2a:53:66:c6:a0:
83:db:0c:7a:93:a8:d9:ec:45:00:d1:84:b0:72:68:
de:20:10:b9:67:ae:6c:08:17:42:a1:68:47:c8:40:
1e:c3:ee:7c:a3:db:fc:12:0c:4c:e1:68:40:69:3c:
ee:55:43:ab:aa:cc:5e:7b:82:ea:97:3f:10:3c:06:
13:18:60:78:a4:6a:bc:98:2f:c7:2a:ae:d7:c4:d9:
1f:04:b0:ea:40:39:4a:15:f4:f1:18:59:f3:ba:e7:
35:c8:9a:33:c1:aa:14:b3:4c:19:1a:67:e2:da:bf:
42:c4:da:9f:e2:0e:23:bf:33:35:7f:2c:9f:d3:bb:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:79:8F:29:F9:AA:16:A9:30:93:24:AE:20:5A:41:C1:33:19:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020896904DE311F19BFBC7FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.30.0/23
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/23
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0d:02:1e:32:bd:d8:38:08:f4:5f:5d:8a:1c:a1:26:e5:6a:
3c:38:72:a6:82:dc:56:dc:89:58:9b:2a:32:36:9a:96:6d:a8:
bc:59:5a:2c:05:50:a2:02:87:99:5a:23:2a:76:f0:81:85:66:
86:e7:79:43:e1:7c:13:e5:b9:41:10:a4:85:e6:fa:20:58:af:
8d:62:4e:00:32:06:2d:88:33:c7:d3:ff:21:b2:52:9a:92:6c:
db:f4:2c:10:4c:15:01:96:22:e9:d8:84:6d:75:46:db:56:04:
b2:b5:02:0f:eb:7e:30:a2:08:aa:c9:b5:8b:f3:d7:f6:a5:ac:
cc:fe:c7:f9:ca:8a:1d:81:34:55:e8:9d:bf:42:a1:d2:de:65:
56:c6:b9:c7:0f:1c:95:63:05:09:cc:ff:21:52:7a:fb:ad:aa:
eb:a8:0e:d3:2b:f0:58:d2:ae:af:61:6a:ae:fd:1a:e7:cc:6f:
63:8c:3a:c6:8e:92:7d:76:86:6e:82:cd:78:9c:8c:be:f3:cb:
32:3e:f4:59:ac:e0:e9:3c:86:1d:19:11:87:c5:4e:62:a9:ae:
38:1d:e6:4d:2f:99:63:0d:d7:28:89:3b:22:03:a1:b0:ab:52:
35:48:b1:1b:a9:93:4a:84:42:c6:e3:f0:b9:6f:7c:45:3a:a3:
2d:8f:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:06:35 2026 by rpki-client